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(57)Abstract: 

PROBLEM TO BE SOLVED: To control access to information protected by a 
server and to prevent the redistribution of the information by allocating a 
specified key including the identifier of a customer and transmitting it to the 
customer so as to decode ciphered information and monitoring the distribution of 
the information in a customer specified base by the key. 



SOLUTION: The server 12 of a computer system 10 communicates with the 
customers 14-20 through a public communication channel 21, receives an 
access request from the customers 14-20 and allocates a decoding key or a 
password. Then, among the information provided in the data base of the server 
12, an access program protected by ciphers and the selected information (digital 
music score) are transmitted through the communication channel 21 to the 
customers 14-20. In this case, in order to decode the ciphered information in 
connection with the request from the customers, the specified key including the 
identifier of the customer is allocated and transmitted to the customer and the 
distribution of the ciphered information is monitored by using the decoding key. 
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CLAIMS 
[Claim(s)] 

[Claim 1] It is the approach of using it in order to supervise the distribution of the 
information included in the database in the server of the above-mentioned public 
communication channel which can be accessed through a public communication 
channel. The encryption system which used the key which needs the input of a 
key in order to decode the enciphered information as the base is used. The 



phase of the above-mentioned information which enciphers the first part at least, 
In order to connect to the demand from a communication line customer and to 
decode the information by which encryption was carried out [ above-mentioned ] 
The phase which assigns the 1st key of customer specification which can be 
used to specify the customer as the above-mentioned customer, and which 
contained the 1st identifier at least, The approach that it consists of the phase of 
transmitting the key of the 1st customer specification of the above to the 
customer, and the above-mentioned key is characterized by the ability to use the 
above-mentioned information to supervise distribution with the customer 
specification base. 

[Claim 2] An approach given in above-mentioned claim 1 which the 
above-mentioned information consists of a digital score, and is characterized by 
consisting of the phase which enciphers a part of above-mentioned information 
[ at least ] maintaining at the format that the 2nd part of the above-mentioned 
score is not enciphered so that the sampling of the above-mentioned digital 
score can be performed before decode. 

[Claim 3] An approach given in above-mentioned claim 1 characterized by 
consisting of that the phase which assigns the key of the 1st customer 
specification of the above acquires the identification information about the 
above-mentioned customer, and symbolizing the above-mentioned identifier 



about the identification information by which acquisition was carried out 
[above-mentioned]. 

[Claim 4] An approach given in above-mentioned claim 3 characterized by 
consisting of the password with which the above-mentioned identifier attaches 
an index to the database of the customer containing the above-mentioned 
identification information. 

[Claim 5] An approach given in above-mentioned claim 3 characterized by 
including the information as which the above-mentioned identifier specifies a 
customer's equipment. 

[Claim 6] An approach given in above-mentioned claim 3 characterized by 
including the information as which the above-mentioned identifier specifies a 
customer user. 

[Claim 7] An approach given in above-mentioned claim 1 characterized by 
including further the phase of transmitting the information by which encryption 
was carried out [ above-mentioned ] to the above-mentioned customer, in 
advance of the above-mentioned phase of transmitting the key of the 1st 
customer specification of the above. 

[Claim 8] An approach given in above-mentioned claim 1 characterized by 
including further the phase of transmitting the above-mentioned access software 
which operates so that a customer can access the above-mentioned information 



in the above-mentioned database to the above-mentioned customer. 

[Claim 9] An approach given in above-mentioned claim 8 characterized by 

including further the phase which uses the above-mentioned access software in 

order to print the copy of the above-mentioned information. 

[Claim 10] An approach given in above-mentioned claim 8 characterized by 

including further the phase which uses the above-mentioned access software in 

order that the above-mentioned information may consist of the digital 

representation of a score and the above-mentioned approach may reproduce 

the above-mentioned score. 

[Claim 11] An approach given in above-mentioned claim 8 characterized by 
including further the phase which indicates the above-mentioned information by 
the display. 

[Claim 12] An approach given in above-mentioned claim 1 characterized by 
performing the above-mentioned phase which assigns the key of the 1st 
customer specification of the above according to receiving the above-mentioned 
demand of the above-mentioned customer. 

[Claim 13] It is an approach given in above-mentioned claim 1 characterized by 
the ability to access independently at the above-mentioned information and the 
1st key of the above, including further the phase of storing the above-mentioned 
information in the 1st field of memory, and the phase of storing the 1st key of the 



above in 2nd field where the 1 st field of the above is another. 
[Claim 14] An approach given in above-mentioned claim 1 characterized by 
including further the phase of storing the above-mentioned information in the 
format enciphered by a customer's memory, the phase of receiving the demand 
for outputting the above-mentioned information, and the phase of decoding the 
information by which encryption was carried out [ above-mentioned ] according 
to the above-mentioned output request. 

[Claim 15] An approach given in above-mentioned claim 1 characterized by 
including further the phase which assigns the 2nd customer of the above the 2nd 
different key of customer specification from the key of the 1st customer 
specification of the above for the phase of receiving the access request from the 
2nd communication line customer who demands access to the above-mentioned 
information, and the informational decode by which encryption was carried out 
[ above-mentioned ]. 

[Claim 16] An approach given in above-mentioned claim 1 characterized by 
including further the phase which uses the key of the 1st customer specification 
of the above in order to pursue the redistribution which the above-mentioned 
information continues and takes place. 

[Claim 17] An approach given in above-mentioned claim 1 characterized by the 
above-mentioned identification information making a trace of redistribution of the 



above-mentioned information further easy to do including tfie phase which 
outputs the output copy of the above-mentioned information, and the phase 
which embeds identification information to the above-mentioned output copy. 
[Claim 18] The 1st field of the memory for being the electronic computing system 
used for supervising distribution of the protected information which can be 
accessed through a public communication channel, and storing a database 
including the information by which protection was carried out 
[ above-mentioned ], The controller which operates so that the identification 
information which is helpful for specifying reception and the source in the access 
request from the communication line customer who demands access to the 
information by which protection was carried out [ above-mentioned ] may be 
obtained and a decryption key may be assigned using the above-mentioned 
identification information. The electronic computing system characterized by 
being useful to decoding the protected information which consists of the 
encryption logic for enciphering the information by which protection was carried 
out [ above-mentioned ] based on the above-mentioned decryption key, and by 
which encryption of the above-mentioned decryption key was carried out 
[ above-mentioned ]. 

[Claim 19] A electronic computing system given in above-mentioned claim 18 
characterized by the above-mentioned identification information attaching an 



index to the above-mentioned decryption key, including further the 2nd field of 
the memory for storing the above-mentioned identification information. 
[Claim 20] A system given in above-mentioned claim 18 or any of 19 they are. 
[ which operates also so that the above-mentioned controller may receive the 
payment information from a customer, and is characterized by assigning the 
above-mentioned decryption key according to the reception of the 
above-mentioned payment information ] 

[Claim 21] A system given in any of above-mentioned claims 18, 19, and 20 
which the information by which protection was carried out [ above-mentioned ] 
consists of a digital score, and are characterized by operating so that the 
above-mentioned encryption logic may encipher the above-mentioned score 
selectively they are. 

[Claim 22] A system given in any of above-mentioned claims 18, 19, 20, and 21 
characterized by the source being the above-mentioned communication line 
customer they are. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 



[0001] 

[Industrial Application] This invention relates to the approach and system which 
use the code which used as the base the key for forbidding [ supervising the 
distribution information which can be accessed through a public communication 
channel, and ] the distribution which is not authorized according to a key owner 
especially, and pursuing in most. This invention is applied especially concerning 
the commercial distribution which lets the public communication channel of 
contents with the ownership of a work with copyright, or others pass. 
[0002] 

[Background of the Invention] The appearance of the computer public 
communication channel which can be used broadly, especially the public 
communication channel which can support a multimedia function like the Internet 
provides the consumer and a content provider (implementer of information 
contents) like a music publisher with the big opportunity. Thanks to such a 
network, a content provider can access now the market which continues growing 
more than former. It becomes easy for a consumer to access information and he 
became very convenient. Furthermore, in a certain case, the digital property of 
the information acquired through a network is sometimes more desirable than 
the information on a conventional type like the printed media. For example, 
digital sheet music can also be printed in order to reproduce the copy of the 



printed media, in addition, various digital musical instruments and equipment 
whose digital sheet music is - ** - it can process directly by the playback 
program of an audio or video similarly. [ like MIDI (MIDI: digital interface between 
electrohones) equipment ] 

[0003] Although there is such possibility, the content provider is hesitating to use 
this market in many cases, the sound in which one of the reasons of this 
hesitation has the copyright which lets a public communication channel pass - it 
is because access to a thing with ownership which is easy had a possibility that 
an owner's profit and income from such contents might be invaded. After this 
concern, i.e., imprudent people, accesses such contents unlawfully or the 
approved user accesses contents at normal, it is concern of breaking and 
distributing those contents to a content provider's access. Although such 
possibility is connected with the format of other distribution and exists, the 
person who thinks that public communication channel distribution is what brings 
about unique danger on account of the ease which can perform wide range 
distribution like a notice plate is also in it. 

[0004] In fact, the conventional computer secrecy maintenance system 
developed in order to control access to the data with which access is restricted 
does not support such concern of a content provider appropriately. For example, 
although the access password system is effective for restricting access to the 



specified information to some extent, protection cannot be hung once 
information is transmitted to a public communication channel from a server 
system. A code system is devised in order to prevent the activity of the 
information unlawfully intercepted as a result of the transfer which lets a 
communication line pass. About this thing, the approved customer is provided 
with a decode key in the code system which used the key as the base. And in 
order to bar a tapping person's activity, it will be transmitted in the type in which 
the information which was able to hang protection was enciphered. The 
approved customer decodes inforhiation for the enciphered information using 
reception and a decode key. The suitable defense measure which bars 
redistributing such [ a calamity / usually ] a code system after the approved 
customer receives the information which was able to hang protection is not 
offered. 
[0005] 

[Summary of the Invention] The approach and system for preventing and 
pursuing that this invention is redistributed after it controls access to the 
information which was able to hang protection from a server and such 
information is transmitted by the server are aimed at. This invention makes easy 
to do commercial distribution which lets the public or the release communication 
line of contents which has ownership by increasing an opportunity correcting the 



activity which improves and infringes on protection of ownership pass. 
Furthermore, this invention enables it to increase the flexibility of 
commercial-scene dealings by considering the sampling before purchase of a 
work with copyright, or other secret contents as acknowledgement of the limited 
multiple use. The code quick reaction capability which has been considered that 
there is no implementability which connects this invention to a physical storage 
like CD-ROM and a magnetic storage medium again and which is not until now 
is offered. 

[0006] In a mode with this invention, the approach and the corresponding system 
for supervising distribution of the information which can be accessed using the 
public communication channel of the customer specification base are offered. 
The phase of establishing an informational database with a server, the phase 
which enciphers informational [ at least / a part of ] using the code system of the 
key base, the phase which connects with a demand of a customer and assigns a 
customer the key of customer specification, and the phase of transmitting a key 
to a customer are included in this approach. It can use for specifying a customer 
and the mark of a certain kind which can supervise the activity of the information 
on the customer specification base by it is included in the customer specification 
key. Various information, such as contents which can be transmitted by the 
digital format of for example, digital sheet music, literature or a work of art, a 



software program, and others, can be put into a database. Any identification 
information can be coded and put into the key of customer discernment. For 
example, it is ** which enciphered [ which enciphered and 
abbreviation-displayed ] the information on others for identifying the computer 
which the address information for the computer of the individual or financial 
information which the customer offered, and a customer, or a website, an 
account number or a SERIARU number, and a customer use, and the above 
information. A convenient thing can be made to be able to memorize such 
information in a separate customer's database, and it can attach an index to it at 
a key. As for a decryption system, it is desirable to need the key of admittance, 
whenever the protected information is used (that is, for a system not to be 
memorized in the type in which information was decoded), and to attach 
customer identification information to all the hard copy of the digital information 
redistributed or information. If it is made such approaches, in order to use 
information in the digital type of the origin of it, a key is required, and it can 
prevent that a customer redistributes the information protected since distributing 
the hard copy to which a key or identification information was attached would 
make the record which will disclose extra sensitive information or can pursue a 
customer's disturbance action. 

[0007] Moreover, in other modes of this invention, the approach and response 



system which can be made to perform access acknowledgement of dealings 
specification about the protected information are offered. Using the code system 
to which a decryption key is assigned with the base the whole dealings and 
which used as the base a key which was described in general previously is 
included in this approach. That is, it is based on the demand related to dealings 
including communicating the protected information from a server to a customer, 
and a key is assigned, dealings - a sheet sound - an easy copy and a digital 
sound - the purchase of an easy score or the information from which others 
were protected may be included, and the license tariff for [ of the count which 
specified such information, the specified period, or the specified license ] 
carrying out a period activity may be contained. Sufficient information to identify 
object information and/or a customer can be included in a key. By this, this 
invention can be made to perform acknowledgement of dealings specification, 
and expands the possibility of commercial-scene dealings / distribution. 
[0008] Again, in other modes of this invention, the information which preceded 
offering a decode key and was enciphered selectively is transmitted, and before 
dealings are materialized, it can be made to perform an informational sampling. 
An informational database is established especially to the approach attached 
together with a communication line server, informational [ a part of ] is 
enciphered to it, and receiving an access request is included in it. According to 



reception of an access request, it is transmitted in the type in which the part as 
which information was chosen was enciphered selectively, and a decode key is 
transmitted to a customer after that. For example, the information enciphered 
selectively may be sheet music which is not enciphered as only the page of the 
beginning of a score is seen. By this, a customer can precede opting for 
purchase, can look over selection of a score roughly, can recognize payment, 
and can receive a decode key now in exchange for it. 

[0009] In the mode of further others of this invention, the approach of supervising 
how after transmitting information, a customer uses, and the corresponding 
system are offered. The phase stored in memory in the type in which received 
the enciphered information in this approach and that information was enciphered, 
The phase stored in memory, for example, a cache, different from the 
information which the decode key was received [ information ] and had the key 
enciphered, The phase of searching the phase of identifying a demand of the 
customer for accessing information, and the information and the key which were 
enciphered from memory according to the demand, and decoding information, 
and the phase outputted in order to present a customer's activity with information 
are included. This approach can be performed by the software of 
playback/display display which runs on a customer's computer. This software is 
programmable to restrict access to the range of a license in which the customer 



restricted namely, purchased access to the information protected according to 
the parameter of dealings. 

[0010] With the desirable activation gestalt, because the protected information is 
decoded by just-in-time when being opened, in order that the file which is not 
saved in the never decoded type and corresponds may present an activity, it has 
become. Therefore, redistributing in the type in which information was decoded 
is considered and **** carried out, or it is prevented in practice. Furthermore, in 
order for a third party to enable it to use information, distribution of the 
information on the enciphered type will also need distribution of a decode key, 
and this will not be the selection which lengthens interest for a customer. Thus, 
this invention enables it to supervise an activity or redistribution of the customer 
following access to the information from which it was protected on the server, 
and it. Furthermore, since this invention enables it to pursue all redistributions 
that are not recognized, it is useful to strengthening a server's access. This 
invention can be made for the opportunity of commercial-scene dealings / 
distribution to perform an increase and coding of the decode key of the demand 
conformity mold which carries out and is not until now again. It promotes that this 
invention distributes contents with ownership through a public communication 
channel, and presents the profit of both a consumer and a content provider with 
them with the advantage of these and others. 



[0011] Distribution/monitoring system of this invention are helpful in various 
scenes with required supervising the distribution which leads the public 
communication channel of contents with ownership. In the following explanation, 
it explains under the situation of saying that distribution of the digital score which - 
lets a communication line pass for this invention is supervised, having the 
extensive applicability which takes up this specific example of application for the 
object of explanation, and various modes of this invention specify by the claim 
should understand - it is **. Drawing 1 shows the electronic computing system 
10 protected by this invention in the code. The server 12 which can 
communicate with a customer 14-20 through a public communication channel 21 
like the Internet is contained in the electronic computing system 10. the case of 
the Internet - a server 12 - Netscape 2.01 or Internet Explorer 3.0 of Microsoft 
or it can access using the browser of a high order further. Generally the 
processor 22, and the library or database of a digital score memorized by 
memory 24 as a file 26-32 is contained in the server 12. Although it discusses in 
a detail below, a server 12 receives the access request from a customer 14-20, 
assigns a decode key or a password, and he operates so that an access 
program and the selected score may be transmitted to a customer 14-20 through 
a communication line 21. A server 12 performs much other functions about the 
thing of receiving payment, and searching and memorizing the enciphered 



decode password. 

[0012] A customer 14-20 may think functionally that it is equivalent to the present 
object. A detail is shown in drawing 1 only about one [ 14 ] of customers. 
Generally a central processing unit (CPU) 34, an internal cache 36 and/or the 
external cache 38, memory 40, and the I/O (I/O) hardware 42 are contained in a 
customer 14, and all are mutually connected via the data bus 44. CPU may 
contain the suitable microprocessor, an access program is downloaded and run. 
memory 40 and caches 36 and 38 are accessed, and it functions as 
communicating with the I/O hardware 42. In the diagrammatic example, the 
built-in internal cache for memorizing the decode key used in order to decode 
the downloaded score to CPU34 is also contained. Generally, or a cache 36 is 
often used so that earlier actuation can be performed, it is in the fastest random 
access memory (RAM) field in a pole for memorizing critical data in time. A 
cache 36 can be accessed more nearly promptly than memory 40. Instead, a 
decode key can also be made to store in the external cache 38, and this may 
consist of the RAM chip arranged on the mother board of a computer. The 
caches 36 and 38 of memory 40 may be another, and it may contain the memory 
of the other computers of the storage of a floppy disk, a CD-ROM drive, and a 
hard drive. Equipments, such as a mouse, a keyboard, other user input 
equipments, a monitor for a check by looking, a printer, and MIDI equipment, 



including various types are contained in the I/O hardware 42. 
[0013] Drawing 2 shows the functional outline of the music distribution 
monitoring system 46 used combining the electronic computing system 10 of 
drawing 1 . As shown in drawing 2 . monitoring system 46 is subdivisible in many 
functions performed by the logic of the computer of a server and/or a customer. 
Use for a customer accessing the music file memorized by the server at the 
function of the diagrammatic system 10. In this case, thing (48) which downloads 
the music access program clearly shown to be "music viewer Thing (50) 
which downloads the score selected from the server, thing (52) which purchases 
music on-line (and obtain the decode key enciphered by this as the access 
license). A print (54) and/or thing (56 to observe) is included in 
encryption/decode of music and music. It could understand music that it is 
reproducible from digital information using MIDI equipment etc. These functions 
of each are discussed below. 

[0014] The download function of the music viewer which is one example of 
activation of this invention is shown in drawing 3 . After the communication link 
between a server and a customer is established via a communication line, a 
customer requires a server to download a program and puts (58) download 
functions into operation. This demand can be inputted according to the suitable 
prompting message from a server site. A server sends the software package of a 



viewer for a download demand to reception (60) and a customer (62), A 
customer runs the setup code for installing (64) which receives a software 
package, and the software of a music viewer In order to access the score 
memorized in the server library of the system currently illustrated, the viewer 
identification code of a proper is assigned to a customer. (66) as which a 
customer demands Viewer ID as a part of download procedure - it is urged like. 
[ therefore, ] ID request - responding - a server - Viewer ID - making - (68) - 
the ID is recorded on the database of a viewer, next, a server records the name 
or type (a customer's input - or - from a transfer header etc. - deciding) of 
equipment of delivery (70), transfer time, a customer's Internet Protocol (IP) 
address (or equivalent information for [ other ] communication lines), and a 
customer for the viewer ID made newly on a customer. Next, it means that 
installation was able to be thoroughly managed with reception (72) and this in 
the viewer ID to which the customer user was assigned. 
[0015] In the system of the illustrated example, a customer user purchases a 
musical copy, or can be made to be able to precede that pay a license tariff and 
dealings are materialized, can survey the inside of a music library, and can see 
the part, i.e., the first page, from which the score was selected. Drawing 4 shows 
the music download function before purchase in which it is attached together. 
This function is put into operation at the time of (74) which selected the score 



which a customer tries listening and required the music from a server. In this 
case, what is necessary is for scores to be other suitable means and just to 
select them from the list of titles, using the retrieval function for clicking on the 
title which scrolled and selected the library, or calling a title. Viewer ID is sent to 
a server at this time, if a demand is received, a server stores the score which 
compressed and enciphered (or - partial - enciphering) and enciphered the 
score as discovering the demanded score and explaining to (76) and the 
following in a download field. Furthermore, a server assigns and records the 
decode key of a proper on a customer, and also records the identification code 
for the viewer ID a score. Download IP, and for transfer. For example, a key may 
be an index for one number to specify a customer by the customer database, 
and **** with another random number may be a password which is symbolized 
for required additional information and which consisted of two 32-bit numbers. If 
the index of a key or a password is attached to a customer database by this 
approach, a password can specify a customer, and can use him to investigate a 
license or account information, in addition can also supervise distribution with 
customer specification and the dealings specification base. 
[0016] And a server sends the address of the uniform resource locator (URL) of 
the music enciphered newly to a customer (78). (82) which requires download of 
the file which contains (80) and the enciphered music when a customer receives 



URL -- things are made. Then, a server finds out the nnusic enciphered in the 
download field, and puts (84) and music into a queue, and downloads music to a 
customer (86). A customer memorizes the enciphered music to reception (88), 
and makes memory, such as a computer memory and hard drive storage, 
memorize music. In the example of illustration activation, only the page of the 
beginning of a score is not enciphered before this event, i.e., purchase. 
Therefore, a customer user can perform the page of the musical beginning, and 
can confirm that the score by which (90) downloads were seen and carried out is 
a score which the user desired, or can evaluate the option of purchase. 
[0017] Thus, what is necessary is for a customer user to purchase music 
purchase on line, for example, a musical copy, in the type of sheet music, or to 
pay the charge of a license, to print a copy, to look at music in the similar 
condition as it is, and just to decide whether play music on a customer's I/O 
hardware, or use music else, after overlook a music library roughly and extract 
one or the score beyond it. A license may have one activity, many activities, an 
unrestricted activity within a license period, etc. An online purchase function is 
shown in drawing 5 . this function -- a customer -- payment information (for 
example, advance payment or non-paying in advance in advance account which 
the account number of a credit card, the expiration date, or the server 
established and which is established beforehand), ID of a score. Download IP, 



Viewer ID, and/or (92) that send some information of other to a server it starts 
by things. In case some of this information or all surveys a music library, it is 
made to transmit them to a server, and it can also be made not to re-transmit 
them. It can encipher using individual and the standard public key code in which 
exchange of financial information is offered in the secure sockets layer (SSL) of 
a browser. 

[0018] A server downloads (94) which receives this information, and a score and 
Viewer ID, contacts a customer user's financial engine, or a credit card 
acknowledgement service establishment, and investigates income-and-outgo 
information, or acquires dealings acknowledgement in other ways. A server 
records a defect payment message (for example, "payment is refused") or a 
decode password on a customer, and records delivery (96). a password, and the 
dealings information on other on a database based on the result of this 
acknowledgement examination. A customer stores in a password database 
different from the music which received the password next and downloaded (98) 
and it by using the software of a music viewer. Thus, generally, since it does not 
know how a user will not understand that the decode password is stored in the 
system, and a user will access a password, it is difficult for a customer user to 
redistribute music unsuitably. If it operates, the software of a music viewer will 
act as the monitor of a customer's message to "open file" message receptacle 



**** (100) which indicates that it wants a user to use music for a print, playback, 
or others, this time - a music viewer - arrangement of a password - deciding 
(102) - since it gathers the rate of actuation, it is also storable in a customer's 
cache. A music viewer can also retrieve the license information related to a 
customer's access request, and in a suitable case, it can also integrate the use 
count of the customer under a license so that it may state below. When the 
customer has left the use count under a license, a music viewer decrypts the 
score of memory. Music is not saved in the never decrypted type, and is 
decoded by just-in-time according to an activity demand, and it should care 
about preventing unjust redistribution by this. 

[0019] Drawing 6 shows the music print function by this invention. As stated 
previously, after downloading music and a password, since a music viewer 
specifies an access request, it acts as the monitor of a customer's message. 
When a print command is received (104), a music viewer decides whether took 
information from the customer database and the count of print-out allowed under 
the license which the customer user purchased beforehand still remains (106). 
In this case, the customer user should already have paid the license tariff of a 
single time activity or a multiple-times activity. When the license is already used 
up, that is notified by the customer (108) and the information about whether 
selection which pays the charge of a license further is made is shown. If it does 



not come out, a music viewer symbolizes the various information about the 
dealings in user databases, such as Viewer ID, Score ID, Download ID, a date, 
time amount, and a count of print-out used having been licensed, (110). This 
information can be symbolized with a suitable format for the symbol string which 
uses 72 as a bottom, and can be printed on a copy (for example, degree of a 
copyright display) (112). Similarly, this same identification information can also 
be written in the comment statement of a MIDI file, in order to tag a MIDI drawer. 
Using this information, right addition of license to use can be performed many 
times, and all illegal redistributions of the copy used as the pudding can also be 
pursued succeedingly. In this case, if the copy of a score or a MIDI file is found, 
the dealings and the customer in connection with this are easily decipherable. 
[0020] I may think that an online user wants to see music on a monitor instead of 
printing music in addition to it. For example, since pleasure is increased, while 
playing music, music can also be seen, and since selection of selection matters 
including playbacks, such as II Tempo and instrumental music organization, is 
made easy to do, the music can also be indicated by the display. Drawing 7 
shows the music observation function which is together, a display viewing 
command - receiving (114) - a music viewer checks whether the aperture (1 16) 
and the file are enciphered in the demanded music file (118). For example, when 
the music is decode ending, or is access dissipation music and is not enciphered 



at a front step, a direct display indication (124) of the music can be given. 
However, when music is enciphered except for 1 page of the beginning for a 
sampling, a music viewer indicates the first page by the display (120), and a print 
or a MIDI drawer is made not to be made. When a customer user is going to 
indicate the musical remaining part by the display from it, as for a music viewer, 
validity and the password which has not been completed check first whether the 
user is assigned or not (1 22). If assigned, a display indication of the music will be 
decoded and given (124). When that is not right, a display indication of the en^or 
message is given (126). 

[0021] One example of activation of encryption/decryption function of music 
distribution monitoring system is shown in drawing 8 and 9. including the activity 
of public key encryption / decryption algorithm, if it is a suitable technique, that 
anythings can be used as an encryption/decryption technique of a base level 
according to this invention should understand - it is **. Furthermore, 
encryption/decryption technique of a base level can be performed by the logic of 
hardware and/or software. The following explanation shows one example of 
typical activation. An outline indication of the component of 
encryption/decryption is given first at drawing 8 . In the server side, the 
compression logic 128, the random number generator 130, and the exclusive 
OR (XOR) gate 132 are included in encryption/decryption subsystem 126. 



Compression logic may be the data compression software program or data 
compression hardware package of a conventional type, and compresses a score 
for reception transfer of a raw digital score. Since it is difficult for the data a 
transfer rate is not only improved by this compression, but compressed and 
enciphered for a tapping person especially to decode, the semantics of 
encryption following it increases. One or the random number generating 
program beyond it may be included in the random number generator 130. In this 
case, in order to process two 32-bit WORD of a decryption password, such two 
programs can be used. The random number generator 130 performs the 
algorithm for making the train of the numeric value which left the first kind and 
was decided. In the diagrammatic example, the assigned password is passed to 
a generator 1 30 as a seed. A generator 130 receives an input from the line of the 
compressed data flow which pulls the trigger of a generator 130 so that a 
generator 130 may output the flow of the bit by which the data flow and die 
length which were compressed were equally unified with it again. The data flow 
into which the generator was outputted and compressed is used as two inputs to 
XOR gate 132 which performs property OR comparator ability. The output from 
XOR gate 132 is transmitted to a customer through a communication line. 
[0022] In the customer side, the random number generator 134 by the side of a 
customer and XOR gate 136 by the side of a customer are contained in a 



subsystem 126, and each is in agreement with the partner by the side of the 
server. The compression thawing logic 138 used as the logic complement of the 
compression logic 128 is further contained in the subsystem 126. The random 
number generator 134 makes the flow of the bit with which used the password 
as a seed and die length was decided to be by the input from the enciphered 
data flow, becoming two inputs to XOR gate 136 should understand the data 
flow which that of the flow of the output bit from a generator 134 was the same 
as that of the thing froni a generator 132, and was enciphered as this output - it 
is **. Although output comes out from XOR gate 136 by actuation which XOR 
gates 132 and 136 followed, this is the same as the output from the compression 
logic 128, namely, it is the compressed score. A digital score is produced in the 
decoded type which this compressed score is thawed by the compression 
thawing logic 138, and is not compressed. It must care about that it is not 
decoded before the score is decrypted as a part of music output processing and 
saves a score. Furthermore, in a print, processing of encryption/decryption is the 
lump of a page size, or is performed continuously (for example, score 2 seconds) 
for every part of size with an appropriate audio output so that display display / 
playback in the prepared base can be performed. 

[0023] Processing of encryption/decryption is summarized to the flow chart of 
drawing 9 . processing - a server side - the digital representation of a score - 



receiving (140) - it starts in the thing which call from memory and to graze, and 
in order, be compressed and (142) enciphered (144) and digital representation 
should pass a communication line - it is transmitted to a customer (146). In a 
customer side, in order to decode in order to obtain the compressed digital 
representation first (148). and to obtain a digital score, compression thawing of 
the signal is carried out (150). If it does so, a score will be outputted as the 
customer user wished (152). The following predictive examples show all 
actuation of the music distribution monitoring system of this invention. A 
customer accesses a music distribution server to the World-Wide-Web (WWW) 
site using Internet Explorer 3.0 browser of Microsoft. A user chooses the option 
for downloading a music viewer program from a server's homepage at first. If this 
option is chosen, a user will install software according to directions or an 
instruction, and will input various kinds of discernment data demanded in 
process of processing. A user may return from it to a homepage and may look 
over roughly the selections which can choose and use a music library option. 
And a user can specify the score which scrolls the selections which can be used, 
for example, is interested in the **** "Mozart's sonata 1st." A user may download 
a score for a sampling, in order that it may confirm that it is what he considers. 
The software of a music viewer memorizes the digital score enciphered 
selectively, indicates the page (this is transmitted in the type which is not 



enciphered) of the beginning of a score by the display on a customer's monitor, 
and enables it to reproduce it. 

[0024] Thus, after sampling one or the score beyond it, it can decide whether a 
user looks at whether a digital score is printed or it uses else, and can decide 
whether purchase the copy of a score, or pay the charge of a license. And the 
menu of purchase options, such as a license which a user can choose a 
purchase function, for example, is indefinitely seen during the license of a single 
time print, the license of a multiple-times print, and a predetermined license 
period, will be shown. A user chooses a desired option, does inputting a credit 
card number and individual humanity news etc., and responds to a series of 
questions about identification information and payment information. 
Acknowledgement of payment assigns a user the decryption password to which 
the index to the customer identification information in the customer database 
which a server holds was attached. For example, a customer may pay the 
charge of a license to ten print-out. In identitas or the next session, a customer 
can demand the print-out under a license. This system pursues the count of the 
used print-out, and unless the license is used up, it enables it to print it. When a 
user prints out the copy of a score, the symbolized character string is printed on 
the degree of a copyright display always. 

[0025] An indiscreet user may redistribute music indifferent to the access of a 



server/copyright holder. Since it lias the file of the music downloaded to its own 
system, a user may redistribute music electronically. However, if it is going to 
redistribute music unlawfully in this way, it will turn out that a user cannot use it 
since the redistributed information is enciphered. Such a user may break an 
encryption code and may surmise that the key is finally stored in somewhere in 
memory of a customer different from a music file, it is said that it succeeds in 
redistributing music with the password of the form which a user can use -- it is 
unlikely to happen when things occur, the user who infringed will have left into 
the format of the individual humanity news which can be drawn from a customer 
/ dealings encryption password, without noticing record of one's disturbance 
action, if similarly the copy or MIDI file used as the pudding is redistributed - a 
copyright display - or record will be offered for the symbblization character string 
contained in comment statement. The information by which it was symbolized in 
any case tends to do operation, and bars disturbance in this way. 
[0026] As mentioned above, although various examples and applications of this 
invention have been explained to a detail, it is clear to this invention for this 
contractor that the further modification and application can be performed. 
However, it must be understood clearly that such correction and application are 
in the pneuma of this invention and the range. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

It explains referring to the drawing of the following [ the term of the following 
detailed explanation ] for a more perfect understanding of this invention and its 
further advantage. 

[Drawing 1] Drawing 1 is the illustration diagram of the electronic computing 
system by this invention. 

[Drawing 2] Drawing 2 is a chart which shows a functional general view of the 
distribution monitoring system of this invention. 

[Drawing 3] Drawing 3 is the diagram of the download function of the music 
viewer of the system of drawing 2 . 

[Drawing 4] Drawing 4 is the diagram of the music download function of the 
system of drawing 2 . 

[Drawing 5] Drawing 5 is the diagram of the online music purchase function of 
the system of drawing 2 . 

[Drawing 6] Drawing 6 is the flow chart of the music print function of the system 
of drawing 2 . 

[Drawing 7] Drawing 7 is the flow chart of the music observation function of the 



system of drawing 2 . 

[Drawing 8] Drawing 8 is the illustration diagram of the component of 
encryption/decryption of the system of drawing 2 . 

[Drawing 9] Drawing 9 is the flow chart of encryption/decryption function of the 
system of drawing 2 . 
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ENCRYPTION SYSTEM WITH TRANSACT 

Field of thc InvcntioTi 

The present invention relates generally to monitoring the distribution of 
information that is accessible through a public network and, in particular, to a method 
and system for using key-based encryption to inhibit and track unauthorized 
distribution by a key holder. The invention has particular application with regard to 
the commercial distribution of copyri^ed works or other proprietary subject matter 
over a public network. 

Background of the Invention 

The advent of widdy available public computer networks, and particularly 
public networks capable of supporting multimedia functions such as the Internet, 
presents a great opportunity for consumers and content providers such as music 
publishers. Such networks afford content providers increased access to an ever 
growing market. Consumers benefit from improved access to information and greater 
convenience. Moreover, in some cases, the digital. nature of the information received 
over a network is preferable to more conventional modes such as printed media. For 
example, digital sheet niusic can be printed to replicate its printed naedia counterpart. 
Additionally > the digital sheet music can be directly processed by audio and video 
playback programs, as well as by a variety of digital musical instruments and 
equipment such as Musical Instrument Digital Interface (MIDI) devices. 

Despite this potential, content providers have been reluctant to embrace this 
market in many cases. One reason for this reluctance has been a perceived threat that 
access to proprietary subject matter such as copyrighted music over a public network 
will erode ownership interests in and revenues from such subject matter. The 



(17) 



0-30 1 90 4 



2 

concern is that unscrupulous persons will wrongfully access such subject matter or 
that authorized users, having rightfully accessed the subject maner, wDl thereafter 
distribute the subject matter in contravention of the content proNdders* rights. 
Although such possibilities exist in connection with othex modes of distribution, 
public network disdibu^on is thought by some to present peculiar dangers due to the 
case with which widespread distribution can be accomplished, e.g.» via bulletin 
boards and the like. 

Indeed, conventional computer security systems developed to control access to 
restricted access data arc irot well-suited to address these concerns of contcm 
providers. For example, access password systems are somewhat effective in limiting 
access to designated information, but do not afford protection once tte information is 
transmitted from the server system to a public network. Encrj'ption systems have 
been devised to prevent use of information that is wrongfully intercepted as a result of 
transmission over a network. In this regard, in key-based encryption systems, 
authorized clients are provided with a decryption key. The protected information is 
then transmitted in encrypted form to prevent use by any intercepting party. The 
authorized client ret^ives the encrypted information and uses the decryption key to 
decrypt the infoimation. Unfortunately* such encryption systems generally do not 
provide adequate safeguards to discourage the authorized clients from subsequently 
redistributing the protected information. . 

Summary c^f the Invention 

The present invention is directed to a method and system for controlling 
access to protected information from a server, as well as discouragii^ and tracking 
subsequent redistribution of such information after it has been transmitted from the 
server. The invention facilitates commercial distribution of proprietary subject matter 
through public or open networks by providing improved protection of proprietary 
rights and increasing the likelihood that infiringing activity will be corrected. 
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Moreover, the invention provides increased marketing flexibility by allowii^ for 
limUed, multiple-use anthorizatioD and pre-purchase sampling of copyrigjited works 
or other confidential subject maner. Hie invention also provides a novel, encryption 
on-demand capability which, it is believed, has not been feasible in connection with 
physical storage media such as CD-ROM and magnetic storage media. 

According to one aspect^ of the present invention, a method and corresponding 
system is provided for monitoring distribution of information accessible over a public 
network on a client-specific basis. The method includes the steps of: establishing a 
database of infoimation at a server; encrypting at least a portion of the information 
using a key-based encryption system; in connection with a request by a client, 
assigning a client-specific key to the client; and transmitting the tey to the client. 
The client-specific key includes some indicia that can be i^ed to identify the client, 
thereby allowing for monitoring of infonnation use on a client-speciijc basis. 

The database can include various types of infonnation, for example, digital 
sheet music, literary or artistic works, software programs, or other subject matter 
transmittable in digital fbnn. Any identifyii^ infoimation can be coded into the key 
for client identification. Examples include: personal or financial data provided by the 
client; address informadon for the clients* computer or web site; account numbers or 
serial numbers; other infonnation for identi^g the computer used by the client; and 
abbreviated or encoded versions of any of the above. Conveniently, such information 
can be stored in a separate client database and indexed to tbe key. Preferably, the 
decryption system requires entry of the key each time the protected information is 
used (Le^, the system does not store the infonnation in decrypted form) and appends 
the chent identifying information to any redistributed digital or hard copies of the 
infonnation. in this manner, the client is discoursed from redistributing the 
protected informadon because the key is required to use the infonnation in its original 
digital form, and distribution of the key or an identified hard copy may involve 
disclosure of sensitive information or otherwise create a naceable record of the 
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client's infringing activity. 

According to another aspect of the present invention, a metbod and 
corresponding system is provided for enabling transaction-specific access 
authorization with respect to pioficctcd infonnation. The method involves the use of a 
key-based encryption system, such as generally discussed above, where decryption 
keys are assigned on a transaction-by-transaction basis. That is, deciyptioii keys are 
assigned on demand in connection with a transaction involving communication of the 
protected infonnation finom the server to a client. Foi cxan^lc, the transaction may 
involve the purchase of a copy of sheet music, a digital musical score or other 
protected infonnaiion. or it may involve paying a license fee to use such information 
a designated number of times, for a designated duration, or during a designated 
license term. The key can inchide information sufficient to identify the subject 
infoimation and/or the client. The invention thereby allows for transaction-specific 
authorization and increased marketing/distribution possibilities. 

According to a further aspect of the present invention, partially encrypted 
information is transmitted prior to providing a decryption key so as to allow for 
sampling of the information before a transaction is consurxuiiated. In particular, the 
associated method in^^olves establishing a database of infonnation ai a network server, 
encrypting a portion of the infoimation and receiving an Bccess request. Upon 
receiving an access request, a selected portion of the information is transmitted in 
partially encrypted form and, thereafter, a decryption key is transmitted to the client. 
By way of example, the partially eiM:rypted information can be sheet music where 
only the first page of a score is unencrypted for viewing. The client can thereby 
browse through a selecdon of scores prior to making a purchasing decision, 
authorizing payment and, in response, receiving a decryption key. 

According to a still further aspect of the present invention, a method and 
corresponding system is provided for enabling post-transmission monitoring of 
informatioa use by a client. The method includes the steps of: receiving encrypted 
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infbrmation and storixig the infbmiatioii in memory in its encrypted fonn; receiving a 
decryption key and storing the ]cey in memoiy separate from the encrypted 
infonnation. for example, in a cache; identifying a request by a client to access tfie 
infonnation; in response to the request, retrieving the encrypted infbrmation and key 
from memory and, thereafter, dearypting the infonnatioo; and outputting the 
information for use by the client. The method can be implemented* for exan^le, by 
playback/display software running on a client computer. The sofrware can be 
programmed for limiting access to the protected information according to transaction 
parameters, e.g.. limiting access to the scope of a license purchased by the cHent. 
The access request can be an **open file," "display," or '*prinf message or the lilce. 

In a preferred implementation, the protected infonnation is never saved m its 
decrypted form but, rather, is only decrypted on a just-in-tirae basis when the 
correspondii^ file(s) is opened for use. Accordingly, redistribution of the 
information in its decrypted form is discouraged or practically prevented. Moreover, 
in order to permit third -party use of the information, redistribution of the infonnation 
in its encrypted form will also require distribution of the decryption key, which may 
be an unattractive option for the client. 

The present mveniion thus allows for monitoring access to protected 
infonnation on a server and subscqucm use or redistribution by a client. 
Additionally, the invention allows for trackmg of any unauthorized redistribution and 
thus facilitates enforcement of server rights. The invention also provides for 
increased marketing/distribution options and novel on-demand decr^ition key coding. 
By virtue of these and other advantages, the invention promotes distribution of 
proprietary subject matter over public networks to the mutual benefit of consumers 
and content providers. 

Brief Description of the Drawings 

For a more complete understanding of the present invendon and further 
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advantages theirof, reference is now made to the following detailed description, taken 
in conjunction with the drawings* in whidi: 

Fig. 1 is a schematic diagram of a computer system in accordance with tiie 
present invention; 

Fig; 2 is a chart providii^ a functional overview of the distribution monitoring 
system of the present' invendon; 

Hg. 3 is a diagram of the Music Viewer download fimction of the system of 

Fig. 2; 

Fig. 4 is a diagram of the music download function of the system of Fig. 2; 
Fig. 5 is a diagram of the on-line music purchase function of the system of 

Fig. 2; 

Fig. 6 is a flow chart of the music printing fonction of the system of Fig. 2; 
Fig. 7 is a flow diart of the music viewing function of the system of Fig. 2; 
Fig. 8 is a schematic diagram of the encryption/decryption components of the 
system of fug. 2; and 

Fig. 9 is a flow chan of iht encryption/decryption function of the system of 

Fig. 2. 

Detailed Description of the Invention 

The distribution monitoring system of the present invention is useful in a 
variety of applications where it is desired to monitor the distribution of proprietary 
subject matter over a public network. In the following description, the invention is 
set forth in the context of monitoring distribution of digital musical scores over a 
net^vorlc. It will be appreciated that this .particular application is set forth for the 
purpose of illustrating the invention, and various aspects of the invention have 
broader application as defined by the claims below. 

Fig. 1 illustrates an encryption 'secured computer system 10 according to the 
present invention. The computer system 10 includes a server 12 that can 
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communicate with clients 14-20 across a public network 21 sudi as the Internet. In 
the case of the Internet, the server 12 can be accessed via the Netscape 2.01 or 
Microsoft Internet Explorer 3.0, or higher browsers. The server 12 generally 
includes a processor 22 and a library or database of digital musical scores stored in a 
memory 24 as files 26-32. As discussed in detail below, the server 12 is operative 
for receiving access requests frpm clients 14-20. assigning decryption keys or 
passwords and transmitting an accessing program and seleacd scores to the 
clients 14-20 over nenvork 21. A number of other functions relating to receiving 
payment, indexing and storing encoded decryption passwords and the like are also 
performed by server 12. 

For present purposes, the clients 14-20 may be considered as being 
functionally equivalent. Details of only one of the clients 14 are shown in Fig. 1. 
Generally, the client 14 includes a central processing imit (CPU) 34, an internal 
cache 36 and/or external cache 38, memory 40 and input/ouiput (I/O) hardware 42, 
all interconnected via data bus 44. The CPU, which may include any suitable 
microprocessor, is operative for downloading and running the accessing program, 
accessing memory 40 and caches 36 and 38, and communicating with I/O hardware 
42. In the UIusTrated embodiment, the CPU 34 also includes a built-in, internal cache 
for storing the dcciyption key used to decrypt downloaded musical scores. 
Generally, cache 36 is an area of extremely fast Random Access Memory (RAM) for 
storing frequently used or time critical data so as to allow for faster operation. The 
cache 36 can be accessed more rapidly than memory 40. Alternatively, the 
decrypting key can be stored in an external cache 38, which may course a RAM 
cliip located on the computer motherboard. Memory 40, which is separate from 
caches 36 and 38, may include con^uter memory as well as the storage of floppy 
disks, CD-ROM drives and hard drives. The I/O hardware 42 can include a number 
of types of devices including a mouse, keyboard or other user input device; a viewing 
monitor; a printer; or a MIDI device. 
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Hg, 2 provides a functioDal overview of a music distribution momtoring 
system 46 used in connection witii the computer systsm 10 of Fig. 1. As shown in 
Fig. 2. the monitoring system 46 can be broken down mto a number of functions th2t 
are executed by logic on the server and/or a client. The functions of the illustrated 
system 10 include: downloading (48) a music accessing program, in this case 
designated the "Music Viewer," for use by a client in accessing music files stored on 
the server; downloading (50) a selected musical score from the server; purchasing 
(52) music on-line (and thereby obtainii^ an access license and encoded decryption 
key); printing (54) and/or viewing (56) the music and music encryption/decryption. 
It will be appreciated that the music may also be reproduced from digital infonnatioi} 
using a MIDI device or the like. Each of these functions is discussed in turn below. 

Fig. 3 illustrates the Music Viewer download function of one implementation 
of the present invention. After communication between the server and client has been 
established through the network^ the client mitiates the download function by 
requesting (58) the server to download the program. This request can be entered by 
following appropriate prompts frorii the server site. The server receives (60) the 
download request and sends (62) the Viewer software package io the client. Upon 
receiving (64) the software package, the client runs the setup code to install the Music 
Viewer software. In order to access musical scores stored in the server library in the 
illustrated system^ the client is assigned a unique Viewer identification code. 
Accordingly, the client is prompted to request (66) a Viewer ED as part of the 
download procedure. In response to the ID request, the server generates (68) a 
Viewer ID and logs ibe ID in a Viewer database. The server then sends (70) the 
newly generated \^iewer ID to the client and logs the transmission time and date, the 
Internet Protocol (IP) address (or similar information for other networks) of the 
client, and the client's machine name or type ( as entered by the client user or 
determined from a n-ansmission header or the like). The client then receives (72) the 
assigned Viewer ID and a successful installation is thus completed. 
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The system of the illustrated embodunent allows the client user to browse 
througji the music library and view a selected portion, e.g. , the first page, of musical 
scxires prior to consummating a transaction by purchasing a music copy or paying a 
license fee. Fig. 4 illustrates the associated prc-purchasc music download function! 
Tlie lunction is initiated when the client selects a score to sample and requests (74) 
the music firom the server. In this regard, the score may be selected ftom a list of 
titles by scrolling through the library and clickii^ on a selected title, by using a 
search fimction to call a title, or by any other appropriate means. The Viewer ID is 
also sent to the server at this time. Upon receiving the request, the server finds (76) 
the requested musical score, compresses and encrjpts (or partially encrypts) the score 
as will be described below, and stores the encrypted score in the download area. In 
addition, the server assigns and logs a decryption key that is unique to the client and 
also logs an identification code for the score, the download FP, and the Viewer ID for 
the transmission. For example, the key can be a password composed of two 32 bit 
numbers where one of the nxunbers is an index to identify the client in a client 
database and the other number is random, or encoded with additional information as 
desired. By indexing the key or password to the client database in this manner, tiie 
password can be used to identify the client, look up license or account information 
and otherwise monitor distribution on a client-specific and transaction-specific basis. 

The server then sends (78) the client the Uniform Resource Locator (URL) 
address of the newly encrypted music. Upon receiving (80) the URL, the client can 
request (82) a download of the file or files containing the encrypted music. The 
server then finds (84) the encrypted music in the download area, queues up the music, 
and downloads (86) the music to the client. The client receives (88) the encrypted 
music and stores the music in memory, e.g., computer memory, hard drive storage, 
etc. At this point in the illustrated implementation, i.c., prior to purchase, only the 
first page of the score is not encrypted. Accordingly, the client user can play and 
view (90) the first page of the music to veriiy that the downloaded. score is the score 
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desired by the user and to otherwise evaluate purchasing options. 

After thus browsing through the music library and sampling one or more 
scores, the client user may decide tD make an online music purchase, e.g.. to 
purchase a copy of the music m sheet music form, or to pay a license fee to print 
copies, view the music in its entirety, play back the music on the client's 1/0 
hardware, or otherwise use the music. Such a license may be for single use, mult^le 
use, unlimited use during a license term, etc. Fig. 5 illustrates the on-line purchase 
function. The function is initiated by the client by sending (92) payment information 
(for example, a credit card account number and expiration date, or the number of a 
previously established, pre-paid or unpre-paid account with the server institution), the 
score ID, the download IP, Viewer ID and/or any other informadon to the server. 
Some or all of this information may have already been ffansmiued lo the server in 
connection with browsing the music library and would not necessarily have to be re- 
transmitted. The exchange of personal and financial information can be encrypted 
using standard public key encryption as provided, for example, in the Secure Sockets 
layer of the browser. 

Upon receiving (94) this informadoo. the server downloads the score and 
Viewer ID, and contacts the client user's financial institution or a credit card approval 
service, looks up balance information, or otherwise obtains authoriiation for the 
transaction. Based on the results of this authorization inquiry, the server sends back 
(96) to the client either a bad payment message (e.g, "payment. declined"), or the • 
scr\'er sends a decryption password and logs d)c password and other transaction 
information in its database. By operation of the Music Viewer software, the client 
then receives (98) the password and stores the password in a password database 
separate from the downloaded music. It will thus be difficult for a client user to ■ 
improperly redistribute music because the user will generally not be aware diai a 
decrypdon password has been stored in its system, nor will the user know how to 
access the password. In operation, the Music Viewer software monitors client 
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messages until it receives (100) an "open file" message indicaring that the user 
desires to print, playback or otherwise use the music. At this time, the Music Viewer 
locates (102) the password, which may be stored in a client cache for speed of 
operation. The Music Viewer can also n^ieve license information relevant the 
client's access request and. in appropriate cases, increment the client use count imder 
the license as discussed bdow. _ If the client has remaining uses under a license, the 
Music Viewer decrypts the score in memory. It will be noted that the music is never 
saved in decrypted form, but is only decrypted just-in-time for a requested use, 
thereby discouraging urgproper redistribuijon. 

Fig. 6 illustraies a music printing function according to the invention. As 
previously noted, after downJoading music and a password, the Music Viewer 
moniiors client messages to identify access requests. When a print command is 
received (104), die Music Viewer consults its client database to determine (106) 
whether there ace any remaining printouts allowed under the license previously 
purchased by the dient user. In this regard, the client user may have payed a single 
nse or rmilti-use license fee. If the license has been exhausted, the client is notified 
(108) accordingly, and information may be provided concerning options for paying a 
further license fee. Otherwise, the Music Viewer encodes (110) variouis information 
regarding the transaction in the user database, e.g., Viewer ID. score ED, download 
ID, date, time and number of licensed printouts used. This information can be 
encoded, for example, in a base 72 number string in an appropriate format, and then 
printed (112) on the copy (e.g. , next to the copyright nodce). Similarly, this same 
identificadon information can be written into a comment statement of a MIDI file to 
tag MIDI extraaions. This information allows for proper incrementing of a multi-use 
license and also allows for subsequent tracking of any improper redistribution of the 
printed copy, in this regard, if a printed copy of the score or MIDI file is found, the 
associated transaction and client can be readily decoded. 

Instead of, or in addition to printing the music, the on-line user may desire to 
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view the music on a monitor. For example, the music may be viewed in conjunction 
with playing back the music for rnbanced eigoyment, or the music may be displayed 
to fecilitate selection of playback options involving tempo, instrumentation and the 
like. Fig. 7 illustrates the associated music viewing function. Upon receiving (1 14) a 
display command, the Music Viewer opens (116) the requested music file and 
determines (118) whether the file is encrypted. If the music is not encrypted, e.g.. 
because it has been decrypted in a previous step or is public domain music, the music 
can be dnectly displayed (124). However, in the case where the music is encrypted 
with the exception of the &st page for sampling, the Music Viewer proceeds to 
display (120) the first page and disable printiAg or MIDI extraction. If die client user 
then attempts to display the remainder of the music, the Music Viewer first 
determines (122) whether a valid and unexpired password has been assigned to the 
user. If so, the music is decrypted and displayed (124). Otherwise, an error message 
is displayed (126). 

Figs. 8 and 9 illustrate one implementation of the encryption/decryption 
function of the music distribution monitoring system. It will be appreciated that any 
suitable technique, including using a public key encryption/decryption algorithm, can 
be employed as the base level encryption/decryption technology in accordance with 
the present invention. In addition, the base level encryption/decryption technology 
can be implemented in hardware and/or software logic. The following description 
illustrates one exemplary implementation. Referring first to Fig. 8, the 
encryption/decryption components are schematically shown. On the server side, the 
encryption/decryption subsystem 126 mcludes compression logic 128, random 
number generator 130 and exclusive OR PCOR) gate 132. The compre^ion logic, 
which can be a conventional data compression software program or a data 
compression hardware package, receives the raw digital musical score and 
compresses the score for transmission: It will be appreciated that this compression, 
in addition to improving transmission speed, enhances subsequent encryption as the 
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compressed and encrypted data will be especially difficult foi an intercepting par^ to 
decipher. The random number generator 130 can include one or nH>re conventional 
random number generatii]@ programs. Jh this regard, two such programs can be 
employed to handle liie two 32 bit words of the decryption password. The random 
number generator 130 implancnte an algorithm for generating a determined series of 
values starting from an initial seed. In the illustrated embodiment, the assigned 
password is provided to the generator 130 as a seed. The generator 130 also receives 
an input ixom the compressed data stream line that triggers the generator 130 such 
that the ger^rator 130 outputs a bit stream equal in length to and coordinated with the 
compressed data stream. The generator output and compressed data stream are used 
as the two ir^nits into the XOR gate 132 which performs its characteristic disjunctive 
comparator ftmction. The output from XOR gate 132 is tnmsmined over the net^'ork 
to the client 

On the client side, the subsystem 126 includes a client-side random number 
generator 134 and client-side XOR gate 136, each identical to its server-side 
counterpart. The subsystem 126 further inchides deconqaression logic 138 that is the 
logical complement of compression logic 128. Hie random number generator 134 
uses the password as a seed, and generates a bit stream of length determined by an 
input from the encrypted data stream. It will thus be appreciated that the output bit 
stream from generator 134 will be identical to that of generator 132. this output, and 
the encrypted data stream, serve as the two inputs into XOR gate 136. The 
successive operation of the XOR gates 132 and 136 yield an output from XOR gate 
136 that is identical to the output from compression logic 128, i.e., a compressed 
digital nnisic score. This compressed score is decompressed by decompression logic 
138 10 yield die digital score in uncompressed, decrypted fonn. It should be noted 
that the musical score is decrypted as part of Ae music output process, not prior to 
saving the score. Additionally, the enciyption/decryprion process can be successively 
performed on page-sized chunks in the case of printing, or an appropriately-sized 
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portions of an audio output <c.g., two seconds of the score), Ib order to allow for 
display/play-back on an aj-rcady basis . 

The encryption/decryption process is summaxizcd in the flow chart of Fig. 9. 
The process is initiated, on the server side, by receiving (140)» or cafling from 
memory, a digital representation of the musical score. The digital representation is 
dien, in sequence, compressed i[142), encrypted (144) and transmitted (146) across the 
network to the client. On the client side, the signal is first decrypted (148) to obtain a 
compressed digital representation, and then decompressed (150) to obtain the digital 
score. The score can then be output (152) as desired by the client user. 

The following prophetic example illustrates the overall operation of the music 
distribution monitoring system of the present invention. A client accesses the music 
distribution server at its World Wide Web site using, for example, the Microsoft 
Internet Explorer 3.0 browser. From the server home page, the user first selects the 
option for downloading the Musk Viewer program. Alter selecting this option, the 
user follows the prompts or instructions to install the software and, in the process, 
enters various requested identification data. The user may then return to the home 
page and select the music library option to browse the available selections. The user 
can then scroll through the available selections to identify a score of interest, for 
example, "Mozart's Sonata Number 1 In order to verily that this is the piece that 
the user has in mind, the user may download the score for sampling. The Music 
Viewer software stores the partially encrypted digital score and will allow the first 
page of the score (which is transmitted in unencrypted fonp) to be displayed on the 
client monitor and played hack- 
After one or more scores are thus sampled, the user may decide that he desires 
to print, view or otherwise use a digital score and that he therefore desires to 
purchase a copy of or pay a license fee for the score. The user can then select a 
purchase function and a menu of purchase options will be provided, e.g., single print 
license, multi-print license, unlimited viewing license for a given license term, etc. 
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The user seJecu tbe desired option, responds to a series of prompts concerning 
idcntificatioii infonnation and payment infonnation, e:g., by entering a a-edit card 
number and personal information. If payment is approved, the user will be assigned a 
decryption password that is indexed to the client's identifying information in a client 
database held by the server. By way of example, the client may pay a license fee for 
ten printoxits . In the same or subsequent sessions, the client can request a printout . 
under the license. The system will ktcp track of the number of printouts used and 
allow printing only so long as the license is UECxhaustcd. Whenever the user prii^ 
out a copy of the score, an encoded string of characters is printed next to the 
copyright notice. 

An unscrupulous user may attempt to redistribute the music with disregard for 
the server/copyright holder's rights. Having the downloaded music file on his 
system, the user may attempt to redistribute the music electronically. However, 
having thus attempted to wrong&Jly redistribute the music, the user will discover that 
the redistributed information cannot be used because it is woypted. Such a user may 
attempt to break the encryption code and may even ultimately surmise that a key has 
been stored in the client's memory somewhere separate fttHn the music file. In the 
unlikely event that the user should succeed in redistributing the music logether with 
the password in useable form, the infringing user will have unwittingly left a record 
of his infringing activity in the form of the personal information that can be derived 
from the client/transaction encoded password. Similarly, redistribution of printed 
ccpies or MIDI files will provide a record due to the coded charaaer string included • 
with the copyright notice or in comment statements. In any event, the coded 
information facilitates enforcement and thus discourages infringcnaciu. 

While various embodiments and applications of the present invention have 
been described in detail, it Is apparent that further modifications and adaptations of 
the invention win occur to those skilled in the an. However, it is to be expressly 
understood that such modifications and adaptations are within the spirit and scope of 
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the present inventioa. 
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CLAIMS 

1. A mettod for use in monitoring distribution of infonoadon accessible 
thxough a public network said infonnation included in a database at a sen'er of said public 
netwoik, comprising the steps of: 

encrypting at least a first portion of said infoniiatioii using a key-based 
encryption system, said key-based encryption system requiring ^cntry of a key to decrypt said 
encrypted infonnation; 

in connecticn with a request by a network client, assigning a fist 
client-specific key to said client for decrypting said encrypted in£:>nnation, said first 
client-specific key including at least a first identifier uscfiil for identifying said client; and 

transnn'tdng said first client-specific key to said client, wherein said key can be 
used to monitor distribution of said infoimatioa on a client-specific basis. 

2. A method as set forth in claim 1 wherein said infonnation comprises a 
digital musical score and said step of encrypting at least a portion of said information 
comprises retaining a second portion of said digital musical score in an unencrypted form so 
as to allow for sampling of said digital musical score prior to decryption, 

3. A method as set forth in claim 1 v^erein said step of assigning said 
first client-specific key comprises acquiring identification infonnation regarding said client 
azxl encoding said identifier with respect to said acquired identification information. 

4. A method as set forth in claim 3 wherein said identifier comprises a 
password that is indexed to a client database including said identification infomiation. 

5. A method as set forth in claim 3 wherein said identifier includes 
information for identifying client equipment. 
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6. . A method as set foith in claim 3 wherein said identifier includes 
infonnalion for identiiying a client user. 

7. A method as set forth in claim 1, "further comprising the step of 
txansmittiiig said enciy|rtcd infonnation to said client prior to said step of transmitting said 
first client-specific key. 

y 

Z. A method as set forth in claim I, further comprising the step of 
transmitting accessing software to a client, said accessing software being operative for 
allowing said client to access said information in said database. 

9. A method as set fcrth in claim 8, fiinher comprising the step of 
employing said accessing software to print a copy of said information. 

10. A method as set forth in claim 8 wherein said information comprises a 
digital represerrtatiDn of a musical score, and said method further comprises the step of 
employing said accessing software to play back said musical score. 

11. A method as set forth in claim 8, further comprising the step of 
displaying said information. 

12. A method as set forth in claim 1 wherein said step of assigning said 
first client-specific key is conducted in response to receiving said request by said client 

13. A method as set forth in claim 1, further comprising the steps of ' 
storing said information in a first area of memory and storing said first key in a second area of 
memory separate from said first area, wherein said information and said first key can be 
separately accessed. 
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14. A method as set forth in claim 1, further comprising the steps of 
storing said infonnation in a client memory in encrypted form, receiving a request to output 
said information, and decrypting said encrypted infonnaticn in response to said output 
request 

15. A method as set forth in claim 1, finthsr comprising the steps of 
receiving an access rcqu^ from a second network client requesting access to s^d 
infonnation and assigning a second client-specific key, diflFcrcnt from said first client-specific 
key, to said second client for decrypting said encrypted information. 

16. A method as set forth in claim 1, further coirprising the step of using 
said first client-specific key to track subsequent redistribution of said mfoimation. 

17. A method as set forth in claim 1, further comprising the steps of 
outpiitting an output copy of said information and embedding identification information m 
said output copy, wherem said identification infomaation facilitates tracking of redistribution 
of said information. 

18. A computer system for use in monitoring distribution of protected 
information accessible through a pubhc network, comprising: 

a first area of memory tor storing a database including said protected 

information; 

a controller operative for receiving an access reqijest fi-om a network client 
requesting access to said protected information, obtaining identification information useful 
for identifying a source, and assigning a decryption key using said identification information; 
and 

encryption logic for encrypting said protected information based on said 
decryption key M^erein said decryption key is useful for decrypting said encrypted protected 
infoimaxion. 
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19. A computer system as set forth in daim 18, fiutber con^siag a 
second area of memory for storing said identijBcation infonnatipn, wherein said identification 
Monnadon is indexed to said decryption key. - 

20. A system as set forth in claim 18 or 19 wherein said controller is 
forther operative for receiving payment iafonnation from a client, wherein said decryption 
key is assigned in response to receiving said payment information. 

21. A system as set fonh in daim 18, 19, or 20 wherein said protected 
infonnatiou comprises a digital music^ score and said encryption logic is operative [oi 
partially encrypting said score. 



22. 

said network client 



A system as set forth in claim 18, 19, 20, or 21 wherein the source is 
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Abstract of the Disclosure 

ENCRYPTION SYSTEM WTEH TRANSACTION CODED DECRYPTION KEY 

The encryption secured computer system (10) mcludes a server (12) that 
communicates with clients (14-20) across a public networic (21) using a novel 
transaction coded decryption key technology that discourages wrongful redistribution 
of protected information such as digital musical scores, and allows for tracking of 
infringing activity. In one implementation, the server (12) distributes access software 
and partially encrypted musical scores to clients upon request. A client can sample 
the partially encrypted scores prior to consummating a transactioa When a score is 
selected, the client enters payment information and is assigned a password that is 
specific to the client and transaction. The password ftmctions as a decryption key to 
enable use of the musical score by the client employing the access software. Any 
subsequent wrongful redistribution of the musical score together with the decryption 
password can be traced due to client identifying information encoded into the 
password. 
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